Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/g2dgxjTDJ1vhuCe-Olf8JDRp3yc.roa
File: g2dgxjTDJ1vhuCe-Olf8JDRp3yc.roa (raw, json)
Hash identifier: 77vqgcjJ1rfSdNo70ZNNNE64QgZ5MqfWbCOm+XOd3rA=
Subject key identifier: 83:67:60:C6:34:C3:27:5B:E1:B8:27:BE:3A:57:FC:24:34:69:DF:27
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D6DFA99705ED9130D64A8A7B12E0543B4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/g2dgxjTDJ1vhuCe-Olf8JDRp3yc.roa
Signing time: Sat 03 Feb 2024 07:59:16 +0000
ROA not before: Sat 03 Feb 2024 07:59:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39543
IP address blocks: 86.106.81.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.96.0/24 maxlen: 24
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.120.0/24 maxlen: 24
89.47.122.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
188.241.3.0/24 maxlen: 24
193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
195.28.2.0/23 maxlen: 23
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 04 Feb 2024 18:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6d:fa:99:70:5e:d9:13:0d:64:a8:a7:b1:2e:05:43:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 3 07:59:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=836760c634c3275be1b827be3a57fc243469df27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:10:90:ba:39:a8:21:fc:29:8f:5e:b9:51:c1:
b2:72:d7:bc:aa:3c:f5:97:bb:44:21:14:8b:25:3b:
b3:94:bb:f0:51:36:cf:97:fb:4c:b7:51:d6:05:6e:
bc:c8:63:8d:b4:86:07:a7:b6:70:12:3f:14:dc:a8:
4e:63:96:6a:10:36:a3:b7:0b:09:08:a3:1d:c5:59:
aa:af:89:5a:5d:68:73:82:0c:59:5a:be:b0:c2:70:
8b:26:1a:31:b6:27:ea:64:8f:86:a3:45:0e:d5:7f:
65:40:b1:08:07:5b:11:9f:09:d0:2f:a9:24:35:01:
81:e0:02:e0:d9:02:f9:ab:c0:ff:f9:f5:06:5d:00:
87:1b:b2:6b:25:7c:41:fd:04:07:e0:1b:1b:2e:23:
79:d3:82:9e:53:1f:ca:7e:ae:53:5b:08:92:5e:a9:
1d:a5:e4:40:c4:8e:e7:43:ab:bc:b0:0a:63:3b:ff:
6d:71:8e:e7:96:e7:c7:f6:78:13:b0:b4:d9:58:40:
db:b1:fa:01:79:69:b3:0e:fa:75:f4:97:a4:01:36:
f8:e0:66:bd:30:92:b8:d7:6a:74:e8:e6:c1:44:3d:
59:38:f2:45:3e:de:0d:a8:7c:e4:e7:4d:be:00:94:
a7:3a:e5:40:91:da:0d:35:a6:a5:dd:c3:4b:24:07:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:67:60:C6:34:C3:27:5B:E1:B8:27:BE:3A:57:FC:24:34:69:DF:27
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/g2dgxjTDJ1vhuCe-Olf8JDRp3yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.81.0/24
89.34.27.0/24
89.35.158.0/24
89.38.228.0/23
89.39.111.0/24
89.40.67.0/24
89.45.164.0/24
89.47.96.0/20
89.47.114.0/24
89.47.120.0/24
89.47.122.0/24
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
188.241.3.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
6e:f2:3d:07:35:52:98:c2:3b:50:34:e2:21:55:02:63:42:89:
e8:6a:11:7b:0f:2d:d0:d2:70:9e:30:1e:27:41:d6:33:5d:98:
7b:3d:c5:cd:99:02:55:bc:66:e5:a9:52:09:ac:31:ef:9d:3a:
d3:a2:82:7e:8b:03:7a:2a:e2:da:23:48:bc:27:51:75:00:4a:
9f:be:ff:c2:84:d7:d8:ae:97:8d:88:9d:83:41:80:94:62:8a:
d4:b4:2b:87:53:f0:cb:ab:ca:01:e6:4e:2d:45:18:20:6d:d9:
d5:b4:e6:8b:72:21:d7:0d:ea:35:2d:06:b1:c9:f7:a8:64:a6:
86:4c:70:1f:2f:16:fc:57:e2:f8:de:87:b9:48:b8:13:f8:39:
9e:d4:69:ed:0a:3e:e5:25:19:28:cd:56:cb:e7:7c:02:af:d6:
8b:36:24:98:e1:42:98:ad:db:a8:72:9d:37:34:8e:9f:c9:1c:
75:eb:dd:4e:39:db:00:28:45:68:a3:bc:0c:38:ed:1a:95:d6:
c0:ff:aa:d4:2f:a5:a3:0d:89:25:10:13:02:7d:11:bf:7f:d4:
ea:a1:ad:38:85:16:10:b3:f7:8d:0c:6c:de:6e:6b:8e:25:83:
61:9d:c4:47:91:cb:13:79:d8:25:bc:7e:05:da:c1:aa:72:da:
e7:c7:9b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org